The vulnerability in the script of the web application for managing IP addresses, app/admin/custom-fields/edit-result.php, allows a violator to execute arbitrary SQL commands.

The vulnerability in the script app/admin/custom-fields/edit-result.php of the IP address management web application, developed with PHPIPAM, relates to the lack of measures taken to protect the SQL query structure during the processing of user fields with the parameter fieldType=set&fieldSize='1...

CVE-2023-1675

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/editstud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-24308

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file...

The vulnerability of the AD/LDAP service used for business management in Bitrix24 allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AD/LDAP service for BizTalk24 management involves insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by executing the script /bitrix/admin/ldapserveredit.php...

PT-2023-17158 · Unknown · Sourcecodester School Registration/Fee System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Registration and Fee System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /bilal final/edit stud.php of the component GET Parameter Handler. The...

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

Cross site scripting

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

PT-2023-21027 · Unknown · File Management Project

Name of the Vulnerable Software and Affected Versions: File Management Project version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module. Recommendations: For...

AZL-35307 CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

GHSA-7JVM-XXMR-V5CW TensorFlow vulnerable to integer overflow in EditDistance

Impact TFversion 2.11.0 //tensorflow/core/ops/arrayops.cc:1067 const Tensor hypothesisshapet = c-inputtensor2; std::vector dimshypothesisshapet-NumElements - 1; for int i = 0; i MakeDimstd::maxhvaluesi, tvaluesi; if hypothesisshapet is empty, hypothesisshapet-NumElements - 1 will be integer...

CVE-2021-3844

Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session...

Design/Logic Flaw

Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session...

CVE-2021-3844

Rapid7 InsightVM is affected by an insufficient session expiration flaw when an administrator performs a security-related edit on an existing, logged-in user. The issue can allow the attacker who originally captured the credentials to remain logged in after the password or related edit, potential...

CVE-2023-27242

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Type parameter under the Edit Loan Types module...

CVE-2023-27242

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Type parameter under the Edit Loan Types module...

Cross site scripting

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Type parameter under the Edit Loan Types module...

CVE-2023-27242

This CVE concerns SourceCodester Loan Management System v1.0 where a cross-site scripting (XSS) vulnerability exists in the Edit Loan Types module, exploitable via the Type parameter. The issue is caused by improper handling of user input that can be reflected/stored and executed in the client co...